<!DOCTYPE html>
<html>
<head>
<script src="resources/object-src-param.js"></script>
<meta http-equiv="Content-Security-Policy" content="object-src http://localhost:8080">
</head>
<body>
This test passes if there is a console message saying the plugin was blocked.
<script>
    appendObjectElement('url');
</script>
</body>
</html>
